CVEvulnerability
CVE-2017-18001
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-12-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-306
Description
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
Affected configurations
• trustwave secure web gateway (<= 11.8.0.27)
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- http://seclists.org/fulldisclosure/2017/Dec/88 Exploit, Mailing List, Third Party Advisory
- https://blogs.securiteam.com/index.php/archives/3550 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/44047/ www.exploit-db.com
- https://www.trustwave.com/Resources/Trustwave-Software-Updates/Important-Security-Update-for-Trustwave-Secure-Web-Gateway/ Vendor Advisory
- http://seclists.org/fulldisclosure/2017/Dec/88 Exploit, Mailing List, Third Party Advisory
- https://blogs.securiteam.com/index.php/archives/3550 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/44047/ www.exploit-db.com
- https://www.trustwave.com/Resources/Trustwave-Software-Updates/Important-Security-Update-for-Trustwave-Secure-Web-Gateway/ Vendor Advisory